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1 MESSAGE M 

2 HASHING FUNCTION H 

3 GENERATE 8RAIO ELEMENT AT RANDOM 
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(57) Abstract: The present invention discloses a digital signature method based on braid groups conjugacy and a verify method 
thereof. The signatory S selects three braid elements that xeLB m 0)i x 'eB ft (l), aeB 0 (l), and considers the braid elements pair (x, x*) to 
be the public key of the signatory S, braid clement a to be the private key of the signatory S; signatory S obtains y (y=h(M) eB n (l)) 
using hashing function h; generate a braid element beRB n .,. ro (l) at random, and then put signature on massage M to produce sign(M)= 
a 'byba" 1 using its private key a an braid element b generated at random; signature verify party V acquires the public key of S, 
calculates message M using system parameter hashing function h, and gets y=h(M); determine whether sign(M) and M are conjugate or 
not, if yes, calculate sign(M)x' and xy using the public key of S which is obtained already and determine whether they're conjugate; if 
not, sign(M) is the invalid, that's to say, verify fails; if yes, sign(M) is the valid signature for message M. The present invention avoids 
k-CSP problem in SCSS signature scheme of prior art, increasing the safe degree of signature algorithm, decreasing the number of braid 
elements used and the times of conjugacy determination in order to improve the calculating efficiency of signature greatly, without 
reducing the safety. 
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